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SPECIFICATION 

TITLE OF THE INVENTION 

5 DATA COLLECTION SYSTEM 

CROSS REFERENCE TO RELATED APPLICATIONS: 

This application is related to U.S. patent application 
fS =. Serial Nos . [Not Yet Assigned] (attorney docket 243/151), 

J 10 entitled, "COMMUNICATIONS BRIDGE FOR CIRCUIT SWITCHED DATA 
Q TRANSFER SIMULATION", and [Not Yet Assigned] (attorney 
fU docket 243/250), entitled, "DATA TERMINAL APPARATUS" , both 

l_ filed on the same day herewith and which are incorporated 

™ herein by reference in their entirety. 

FIELD OF THE INVENTION: 

This application relates to the field of wireless data 
transfer technology, and more particularly, to data 
collection methods and apparatuses using simulated circuit 
2 0 switched technology. 
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BACKGROUND : 

Monitoring the residential, commercial, and industrial 
complexes of buildings throughout the United States are a 
variety of user equipment. Examples of such user equipment 
5 include meter reading devices that measure consumption of 
various utility commodities such as natural gas, 
electricity and water via an electrical or electro- 
mechanical transducer. The meter reading devices are 
O typically analog devices that record either a first reading 
; J:10 and a second reading of the measured commodity over a 

T""i 

if period of time, or, alternatively, a cycling total (that 

is, a running total that recycles after a certain number is 
□ reached) . 

fy Generally, service personnel for the utility provider 

yyl5 physically appear at or near the meter reading device to 
record consumption of the commodity each month. The 
recorded consumption from the meter reading device is then 
fed into a database used for billing purposes which in turn 
generates an invoice for the consumer based on user's 
2 0 consumption of the measured commodity. 

In urban areas, the number of meter reading devices 
that need to be recorded is tremendous. Although the 
overhead associated with sending service personal to a 
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desired location can be amortized by consolidation of meter 
reading devices at a particular location, for example, in a 
high-density residential development such as an apartment 
complex, the cost can still be significant. In rural 
5 areas, however, the cost is higher as meter reading cannot 
generally be amortized over a number of meter reading 
devices read at a single location. 

Various techniques are employed by utility companies 

*f to reduce the cost of sending service personal to a 

jE 10 physical site . 

f« For example, a simple method is the use of stochastic 

techniques for extrapolating a measured quantity for a 
O current reading from one or more past values or a moving or 

rU seasonal average. This technique is designed to reduce the 

: =-^15 frequency of meter reading. A disadvantage, however, is 

the fact that the extrapolated reading can be greatly under 
or over the actual consumption, such as the case where a 
consumer is simply not present and no services are used, or 
when an unusual weather pattern occurs and consumption is 
2 0 significantly increased. 

Another technique is the use of radio-based meter 
reading devices. For example, each meter reading device 
includes a radio, the radio capable of broadcasting a meter 
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reading to a nearby receiver. In the Middle East for 
example, such a system is often employed because service 
personnel are frequently denied access to a property when 
the property owner (a man) is not home. The radio based 
meter reading devices allow service personnel to drive near 
the radio meter reading device with a receiver device to 
read the meter. With such technology service personnel do 
not need to enter the property. An advantage of such a 
system is that, in rural areas, the time it takes service 
personnel to read the meters can be reduced. 

For example, one system might require service 
personnel to physically drive by or near a collection of 
meter reading devices in order to communicate with the 
devices. The data collected in the u drive-by" would be 
later uploaded to a centralized data collection system. 

Another solution might include periodic stations that 
collect wireless data from the devices. The periodic 
stations, in turn could include a landline modem that 
communicates with the centralized data collection system by 
way of circuit switched calls. Such a solution offers an 
alternative to deploying service personnel, however, 
setting up phone lines to service the periodic stations can 
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also be expensive. Moreover, circuit switched calls can 

also be expensive. 

The problems mentioned above are exacerbated by 

deregulation of the utilities industry in the United 
5 States. It is now possible for several different suppliers 

of electricity to service a single metropolitan area. 

This, in turn, results in a non- contiguous patchwork of 

service areas that service personnel may have to monitor. 

No longer can it be assumed that all users in a particular 
£-10 geographic area receive electrical power from a single 
;F] service provider. Indeed, on a single residential block 

Fy every household may have a different service provider, 

s Moreover, the alleged ease with which a consumer may switch 

service providers further complicates the circumstance. 
^flS Accordingly, the ability to amortize the costs of 
■%f collecting usage measurements is reduced. 
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SUMMARY OF THE INVENTION: 

A data collection system for transmitting data from 
user equipment to a user application server over a GSM 
network is provided. According to an aspect of the 
5 inventions, a data terminal apparatus is configured to 
simulate a circuit switched call link to the user 
equipment, while providing a communications call link to 
the GSM network over a non- circuit switched call link. 
^ According to embodiments described herein, the non- 

jj* 10 circuit switched call link is achieved via packetizing 

S"~*s 

O serial data from the user equipment into short message 

fU service messages, or alternatively via general packet radio 

s service messages. As a result of the methods and 

apparatuses of the present inventions, legacy serial 
^15 communications equipment can be integrated into a data 
^ collection network and remotely monitored without the costs 
associated with deploying service personnel or costly 
circuit switched type equipment and services. 
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BRIEF DESCRIPTION OF THE DRAWINGS: 

FIG. 1 depicts a physical packaging of an embodiment 
of the present inventions; 

FIG. 2 depicts physical packaging of an alternative 
embodiment of the present inventions; 

FIG. 3 is a block diagram of a preprocessor unit and 
interface architecture ; 

FIG. 4 is a hardware schematic of the preprocessor 

unit ; 

FIG. 5 is a memory map of a presently preferred 
embodiment of the present inventions; 

FIGS. 6A-C are block diagrams of embodiments of the 
present inventions including a user equipment; 

FIGS. 7A-B depicts state diagrams for two of the 
interrupt service routines of the present inventions; 

FIG. 8 is a flowchart depicting a main loop for a 
preprocessor driver; 

FIGS. 9-12 are flowcharts depicting interrupt service 
routines for the preprocessor driver; 

FIG. 13A is a block diagram of a system employing the 
present inventions ; 

FIG. 13B is a flow diagram showing a simulated circuit 
switched call set-up; 
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FIG. 13C is a flow diagram showing a simulated circuit 
switched call tear down; 

FIG. 14 is a block diagram of an network monitoring 
system employing the present inventions; and 

FIGS. 15A-C depict various protocol stacks used in 
embodiments of the present inventions. 
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DESCRIPTION OF THE PREFERRED EMBODIMENTS: 

A method and apparatus for circuit switched data 
transfer simulation is provided. According to an aspect of 
the inventions, a communications bridge (or interface) is 
provided that deceives a data collection device into 
believing that circuit switched communications are being 
performed. In a presently preferred embodiment, 
communications are actually performed by way of GSM short 
messaging services (hereinafter "SMS") . 

According to one embodiment of the present inventions, 
the communications bridge is implemented by way of 
specially configured electrical hardware and software. 
However, according to another embodiment, the 
communications bridge is implemented by way of 
functionality added to an application layer of a GSM 
protocol stack on existing GSM modem hardware. Both 
embodiments are described herein. 

OPERATIONAL OVERVIEW 
FIG. 13A is a block diagram of one embodiment of a 
system 1300 employing the present inventions. User 
equipment 13 04 is a data collection device, such a meter 
reader collection station that receives data from a number 
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utility meters. User equipment 1304 is communicatively 
coupled (e.g., by a serial data interface 1306) to a data 
terminal apparatus 1308, which functions as a 
communications bridge. Data terminal apparatus 13 08 is 
5 configured to communicate with a GSM network 132 0 over a 
wireless interface (or "over-the-air" interface) 1324, 
preferably by way of a standard GSM modem which is a 
component of the data terminal apparatus 1308. For now, 
^ the left side of the GSM network 132 0 will be called, for 
jfIO convenience, the originator equipment. The commands 
p described below are preferably implemented from a modified 
ft] Hayes AT command set . 

^ To the right of GSM network 1320, and also linked by a 

!! J wireless interface 1328, is a similar data terminal 
*Sl5 apparatus 1312 which is also communicatively coupled (e.g., 
by a serial data interface 1314) to user equipment 1316. 
User equipment 1316 can include a second data collection 
station or other device for analyzing or relaying 
communications from the originator equipment. For 
2 0 convenience, the right side of the GSM network 132 0 will be 
referred to as receiver equipment. Note that receiver 
equipment does not have to mirror the originator equipment, 
for example, the receiver equipment does not have to be 



10 



PATENT 
239/217 

coupled to the GSM network 132 0 by way of a wireless 
interface 132 8 and can instead be coupled by way of 
physical network connections. 

FIGS. 13B-C depict a call setup and call tear down 
5 protocol for circuit switched call simulation. According 
to one embodiment, neither the originator user equipment 
13 04 nor the receiver user equipment 1316 will be aware 
that a non-circuit switched call was made. The data 
P terminal apparatuses 1308 and 1312 simulate circuit 
; J;;10 switched call response to the user equipment and thus make 

the fact that a non- circuit switched exchange was performed 
[£■ transparent . 

p Turning first to FIG. 13B, it is aligned with FIG. 13A 

fy and depicts a flow diagram for a simulated circuit switched 
tfll5 call setup. Starting from user equipment 13 04, an ATD 
command 1332 is issued and serially passed to the data 
terminal apparatus 1308 over the serial data interface 
130G. The communications bridge handles the incoming ATD 
command 1332 and sends an SMS establish link message 1336 
2 0 to the wireless radio. According to one embodiment, the 
data terminal apparatus and user equipment negotiate flow 
control so as to prevent input buffer overflows from data 
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being transferred from the user equipment 1304 to the data 
terminal apparatus 1308. 

The wireless radio transmits the SMS establish link 
message 1336 over the wireless interface 1324 to the GSM 
5 network 1320. The GSM network 1320 routes the SMS 

establish link message 133 6 to the receiver wireless local 
loop 1328. At the receiver wireless local loop 1328, the 
SMS establish link message 1336 is then routed to data 
f1 terminal apparatus 1312, which receives the message at its 

jplO wireless radio and then handles the message with its 
D communications bridge. The communications bridge examines 
fU the message and notifies the user equipment 1316 of an 
^ incoming call with a ring indicator 1340. 

|1 The data terminal apparatus 13 08 communications bridge 

fSl5 preferably keeps the phone number active for five minutes. 
This is to accord sufficient time to receive an 
acknowledgment of the SMS establish link message 1336 from 
the user equipment 1316. 

According to one embodiment, the AT command "ATA" 
2 0 (shown as ATA command 1344) is passed from the user 

equipment 1316 to the data terminal apparatus 1312. The 
data terminal apparatus 1312 then sends an SMS link 
established message 1348 to the data terminal apparatus 
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1308. Upon receipt of the SMS link establish message 1348, 
the data terminal apparatus 13 08 communications bridge 
sends a connect message 1352 to the user equipment 1304. 

Note that if more than one SMS establish link message 
1336 is received from the GSM network 1320 by the data 
terminal apparatus 1312 before an ATA command 1344 is 
received from the user equipment 1316, then the data 
terminal apparatus 1312 communications bridge responds to 
the most recent SMS establish link message 1336. 

Once the SMS link is established, data can be 
transferred between the user equipment 13 04 and the user 
equipment 1316 over via short messaging services routed 
over the wireless local loop(s) by the data terminal 
apparatuses 1308 and 1312. 

With a virtual link between the originator equipment 
and the receiver equipment, data can be passed as if a 
regular circuit switched call is being performed. The 
operation is transparent to the user equipment, as the data 
terminal apparatus communications bridge handles all data 
packetization, handshaking, sequencing and error correction 
required by the particular application in which the 
equipment is employed. 
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Now turning to FIG. 13C, it is also aligned with FIG. 
13A. FIG. 13C depicts a call link tear down 1350 flow 
diagram for a simulated circuit switched call. According 
to one embodiment, the communications bridge in the data 
5 terminal apparatus 1308 waits approximately ten minutes for 
data or commands from the user equipment 1316. If no data 
or commands are received in such time frame, then the call 
is considered "dropped". However, receiving an escape 
^ sequence also causes the call to be dropped. 
pi 1 0 First, the escape sequence 1356 is received by the 

p data terminal apparatus 1308. An SMS disconnect link 
fy message 13 60 is then transmitted over the wireless 
s interface 1324 by the wireless radio in data terminal 

J apparatus 13 08. 

^15 The GSM network 132 0 receives the transmitted SMS 

disconnect link message 1360 and routes it over wireless 
interface 1328 to data terminal apparatus 1312. Data 
terminal apparatus 1312 receives the SMS disconnect link 
message 13 60 and it is processed by the communications 
20 bridge. The communications bridge, in turn, sends a 

disconnect indicator 13 64 to the user equipment 1316 and 
then a link disconnected message 1368 back to data terminal 
apparatus 1308. When the link disconnect message 1368 is 
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received by the data terminal apparatus 13 08, the wireless 
radio drops the link. 

Although described above with reference to an SMS 
embodiment, according to another embodiment, the 
communications bridge simulates circuit switched calls by 
way of general packet radio services ( "GPRS" ) . The call 
setup and tear down are substantially similar to the 
methods described above (and below) , however, rather than 
supplying a phone number after AT command W ATD" , an 
internet protocol address is supplied (e.g., 

"ATD114 . 32 . 0 . 108" ) . Once a connection is established, data 
packets passed over GPRS are formatted similar to the data 
packets over SMS. 

Another difference between the SMS and GPRS approaches 
is that rather than having a 14 0 byte packet length and a 
baud rate of less than 300 baud (SMS) , GPRS packets can 
have a 1500 Kbytes packet length, moreover, a much higher 
over-the-air rate, 170 Kbaud, is also possible. The 
addition of larger data packets and increased bandwidth 
allows easier integration of additional functionality into 
the communications bridge, such as relaxed flow control, 
handshaking for improved quality of service, mult i -bit 
encryption, and other error recovery techniques (e.g., 
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parity checks, CRC, etc.). While such features are 
possible in the SMS embodiment, the small packet size may 
require packet sequencing number and other header 
information to be sent with each packet, which would 
5 further slow communications. 

One example of a system implementing the general 
architecture described above is a home automation 
application running on a personal computer (user equipment 
□ 13 04) , that interfaces data terminal apparatus 13 08 via 

^ iF'ii 

4=10 interface 1306. At the opposite end of the home automation 

5""""ji 

O application resides a home network control center embodied 

W in user equipment 1316. The home automation application 
!L provides monitoring and control services to the home 
=?[ network control system, whereas the home network control 
J 15 system controls, for example, heating, ventilation, air 

conditioning, and security for a user's home. Commercially 
available home network control systems include Echelon 
Corporation's LONWORKS™ technology. 

Another example of a system implementing the general 
20 architecture depicted in FIG. 13A is an automatic meter 

reading system. In such a system, user equipment 13 04 is 
an automatic meter reader collection station that receives 
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measurements of consumption of a metered commodity, such as 
electrical power or natural gas, for one or more automatic 
meter readers. Data measured by the automatic meter 
readers is sent to the collection station where it is in 
5 turn fed to the data terminal apparatus 1308. User 

equipment 1316 can be a utility device that either actively 
polls the collection station via data terminal apparatus 
1312, or passively receives measured data from the data 
collection station via data terminal apparatus 1312. 

10 

PHYSICAL PACKAGING 
FIG. 1 depicts a perspective view of an embodiment of 
the physical packaging of a data terminal module ("DTM") 
100. The data terminal module 100 includes an enclosure 
15 104 that surrounds a data terminal sub-assembly ("DTSA") . 
The data terminal sub-assembly (not shown) is a circuit 
card that is configured to receive a preprocessor and 
wireless radio, which are described in detail below. 
A coaxial cable connector 108, a standard DB-9 
20 connector 112, a power connector 116 and a power indicator 
120 are shown on the on the enclosure 104. Each is 
connected, internally, to the data terminal sub-assembly. 
The coaxial cable connector 108 is configured to receive an 
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antenna for the wireless radio. Two mounting sleeves 106 
are notched into the enclosure 104. The mounting sleeves 
106 provide a path for connectors that are used to secure 
the data terminal module 100 to a desired location. 
5 FIG. 2 depicts a perspective view of an embodiment of 

the physical packaging of a data terminal unit ("DTU") 200. 
The data terminal unit 2 00 includes a two-part enclosure. 
Case 204 carries electronics modules, such as data terminal 
sub-assembly 228 and power supply 232. A heat sink 224 is 
SlO placed at each inside corner of case 2 04 and is used to 
jffi dissipate heat generated by the electronics modules. The 

outside surface of case 2 04 comprises a coaxial cable 
O receptacle 240, and an A/C power cord 244. Also shown on 
[y the outside surface of case 204 are two hinged latches 216. 
a tfl5 The second part of the enclosure for data terminal 

unit 2 00 is a cover 208. Cover 2 08 is connected to case 
204 via hinges 248, and is configured to sealably enclose 
the electronics modules carried in the case 2 04. Latch 
connectors 212 receive hinged latches 216 to assist in this 
20 end. The cover 208 and the case 204 also include a number 
of connector receptacles 220 for additional protection. A 
patch antenna 236 is mounted to the cover 208. The patch 
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antenna 236 is coupled to the wireless radio contained in 
the data terminal sub-assembly 228. 

Details of a presently preferred patch antenna 236 and 
embodiments of an enclosure are described in U.S. patent 
5 application Serial Nos . 09/316,457, entitled "CAPACITIVE 
SIGNAL COUPLING DEVICE", and 09/316,459, entitled 
"RADIATING ENCLOSURE", both filed May 21, 1999, which are 
incorporated herein by reference in their entirety, 
According to an alternative embodiment, special 
10 electrical hardware is not employed in either the data 

terminal module 100 or data terminal unit 200. In such an 
embodiment, application software is added to a standard GSM 
modem software stack. Accordingly, the data terminal 
- apparatuses can be a specially configured GSM modem. 

15 

PREPROCESSOR EMBODIMENT 
FIG. 3 is a block diagram of the preprocessor 
architecture. Preprocessor 300 is coupled to a first 
interface 328, a second interface 336, and a third 
20 interface 332. Preferably, each of the interfaces includes 
an RS-232 port having a DB-9 or equivalent physical 
connector. COMA 3 04, COMR 3 08 and DEBUG 312, for example, 
can be implemented with such connectors. Communication 
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lines 316, 320, and 324 communicatively couple the physical 
connectors to the preprocessor 3 00. 

According to one embodiment, the first interface 328 
connects to user equipment (e.g., telemetry equipment, 
5 automatic meter reading equipment, meter reader 
concentration point, utility meter control system, 
substation monitoring equipment, etc.). The user equipment 
is configured to collect measured data that monitors 
external activity. The second interface 336 is a physical 

10 connection to a wireless radio, more specifically a GSM 
modem having a baud rate of approximately 9600 bps or 
higher. The third interface 332 is preferably an open 
serial interface capable of receiving a terminal or test 
equipment for debugging and configuration purposes. 

15 According to one embodiment, the debug port services can be 
physically accessed through the first interface 328. 

Each RS-232 connector 304, 308 and 312 is shown 
coupled to the preprocessor 300 by unique communication 
lines 316, 320 and 324. This is for simplicity and to 

2 0 represent a unique address for each communication port or 
serial interface. In fact, a single address and data bus 
can support the communication ports. 



20 



PATENT 
239/217 

FIG. 4 is a hardware schematic a presently preferred 
embodiment of the preprocessor 300. The preprocessor 300 
comprises a microcontroller 4 04, preferably Dallas 
Semiconductor part no. DS80C323 (16 MHz) , a universal 
asynchronous receiver transmitter ( "UART" ) 416, preferably 
an Exar Corporation part no. ST16C2450 (8 MHz), a non- 
volatile memory 424 , preferably Advanced Micro Devices part 
no. 2 9LV001B-70JC, and a volatile memory 42 8, preferably 
IDT part no. 71V256SA-12PZ . Additional control logic 420 
is desired, such as gate arrays and TTL logic, for 
maintaining timing (e.g., a clock divider for the UART 
416), buffering, and logic levels. Power circuitry 412 
provides power to the preprocessor 3 00 and any peripheral 
device (e.g., a wireless radio), and a crystal oscillator 
408 (16 MHz) provides a clock signal. A main bus 432 
communicatively couples the microcontroller 404, with 
memories 424 and 428, as well as control logic 420. The 
main bus 432 includes both data, address and control lines, 
such as the same control lines 43 6 interconnecting the 
clock 408, the UART 416 and the microcontroller 404. 

Additional lines 44 0, 444 and 44 8 are shown connected 
to UART 416. These lines are for the first interface 328, 
second interface 336, and third interface 332. Interrupts 
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are received by the UART 416, over lines 440, 444, and 448, 
which trigger exception/interrupt algorithms in the 
microcontroller 404. A portion of the volatile memory 428 
is used as a 1024 byte memory buffer for each input queue 
5 in UART 416 (thus, if two interfaces are used, 2048 bytes 
of memory are used) . 

FIG. 5 shows a memory map for 65 kilobytes of address 
space. The lower 49 kB address space 504 is for the non- 
volatile memory 424, the next 12 kB of address space 508 is 
JFIO for volatile memory 42 8, followed by 8 bytes of address 
C space 512 for the first interface 32 8, followed by 2 kB of 

W address space 516 of reserved memory, 8 bytes of address 
;L space 52 0 for the second interface 336, and another 2 kB of 

!l address space 524 for reserved memory. 

%15 FIGS. 6A-C depict various physical embodiments of the 

present inventions interfaced with user equipment (e.g., 
data collection unit 608) . FIG. 6A shows a single user 
equipment 600 comprising a data collection unit 608 (e.g., 
an automatic meter reader) , a preprocessor 604 and a 
20 wireless radio 612. The preprocessor 604 is coupled to the 
data collection unit 608 via a first interface 616, and to 
the wireless radio 612 via a second interface 620. 
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FIG. 6B shows a user equipment 624 including the 
preprocessor 604. Here, wireless radio 612 is in a 
separate physical packaging 628. Here, the second 
interface comprises I/O interfaces 652 and 656 (e.g., RS- 
5 232 ports) . The I/O interfaces 652 and 656 are connected 
via a serial cable 644. I/O interface 656 is coupled to 
preprocessor 604 via connector 640, and I/O interface 652 
is coupled to wireless radio 612 via connector 648. 
^ FIG. 6C shows a user equipment 632, which is similar 

7*10 to the system depicted in FIGS . 6A and 6B, however, the 
O preprocessor 604 and wireless radio 612 are found in data 
W terminal unit/module 636. The same interface described 
* above with reference to FIG. 6B and the second interface 

JfH 62 0 is shown in FIG. 6C. However, in FIG. 6C the 

%15 components found in the second interface 62 0 are found in 
the first interface 616 instead. FIG. 6C is most like the 
data terminal module 100 and data terminal unit 2 00 shown 
in FIGS. 1 and 2 respectively. 

An operational overview of the techniques of the 
2 0 present invention are now presented. Generally speaking, 
the preprocessor 604 is a hardware component that includes 
a software driver. As described above, the preprocessor 
604 can have a dedicated piece of hardware that executes 
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the software driver, however, it is also possible for the 
software driver to be overlaid into an existing piece of 
hardware as an additional component of the software stack. 
For example, the preprocessor driver can be added to the 
user equipment software stack or to the wireless radio 
software stack. The preprocessor driver, as it is referred 
to herein, is generally an interrupt driven service routine 
that first identifies the source of an interrupt and second 
determines what process or interrupt service routine to 
execute based on any of the data accompanying the interrupt 
(or the interrupt itself) . 

It should be noted that the incoming data is 
preferably serial ASCII character data. Commands are 
preferably based on the well-known Hayes modem AT Command 
set, although additional special codes can be added to 
identify particular functionality described herein. Some 
of these codes are described below with references to Table 
2 . 

According to one embodiment, the primary components of 
the preprocessor driver are saved in non-volatile memory 
424 (e.g., section 504 of memory map 500) and are executed 
by microcontroller 404 as a sequence of instructions stored 
in a computer- readable format. For example, the sequences 



24 



PATENT 
239/217 

of instructions (e.g., op codes) are loaded into data and 
control registers within the microcontroller 4 04 from the 
non-volatile memory 424 (alternatively, the instructions 
can be copied from non-volatile memory 424 to a volatile 
5 execution memory before being executed) . The sequences of 
instructions cause the microcontroller 404 in the 
preprocessor 300 to perform a series of acts based upon a 
combination of the sequences of instructions and the data 
Q received from the serial data interface (e.g., UART 416). 

J: 10 Program variables needed by the preprocessor driver are 

O 

m either stored in available registers internal to the 

jE microcontroller 404, or they are stored in volatile memory 

O 428. 

III Two state diagrams are described below with reference 

©15 to FIGS. 7A-B. The descriptions are general and are 

further supported by the detailed flowcharts described 
below with reference to FIGS. 8-12. 

A state diagram 700 for the first interface interrupt 
service routine is shown in FIG. 7A. The default state is 
20 IDLE mode 704. In the IDLE mode 704, characters are 
received over the first interface 616 and tested for 
commands or events that trigger a state change, for example 
link commands 716 and 728. If a command or event 
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indicating a state change is not detected then the data 
characters are stored in a memory buffer until a state 
change does occur. 

The circuit ("CKT") mode 712 passes data from the 
5 first interface 616 directly to the second interface 62 0, 
with little intervention from the preprocessor 604, except 
to monitor for commands or events that may trigger another 
state change (e.g., an escape sequence). In the circuit 
^ mode 712, an active virtual link is maintained between the 
plO wireless radio 612 and a public telephony switched network 
q ("PSTN") over a wireless local loop. The circuit mode 712 

flj is maintained until an escape sequence 72 0 is detected, 
s However, if a re-enter command 732 is detected following 

B the escape sequence 72 0, then the interrupt service routine 
^£15 will return to the circuit mode 712 and not to IDLE mode 

yy 704 , 

The short message service ("SMS") mode prepares and 
sends SMS messages comprising the data stored in the memory 
buffer from the first interface 616, over the second 
20 interface 620, and through the wireless radio 612. From 
the wireless radio 612, the SMS messages are carried over 
the GSM network and are then routed over other intervening 
networks to their ultimate destination. 
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SMS messages generally have a 140 byte data structure. 
The first byte indicates an SMS message type, the second 
byte indicates the SMS message length, and the last 13 8 
bytes comprise the SMS message body. The SMS message body 
comprises either character data, or commands, or both. The 
SMS messages types are described in Table 1. 

Table 1 



requests that a virtual link 
be established for SMS data 
transfer 

a reply to an establish link 
message indicating that the 
link is setup (the sending or 
receipt of this message 
causes the mode to change to 
SMS mode) 

all data is transferred using 
this message type 

requests that a link be 
disconnected (the sending or 
receipt of this message 
causes the mode to change to 
IDLE mode) 

link disconnected a reply to the disconnect 

link message 



An escape sequence 724 causes the state to return from 
SMS mode 708 to IDLE mode 704. 

State diagram 750, shown in FIG. 7B, depicts the 
states associated with the second interface interrupt 
service routine. The states described above with reference 



establish link 
link established 

data link 
disconnect link 
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to the first interface interrupt service algorithm are 
substantially similar to those associated with the second 
interface interrupt service algorithm, the primary 
difference being that if an interrupt was received over the 
5 second interface, then it is not from the user equipment 
(e.g., data collection 608), but rather from remote 
equipment beyond the wireless radio 612. 

In IDLE mode 754, data characters received at the 
;P ,, second interface 620 (e.g., COMR 308) are passed straight 
%10 through the first interface 616 (e.g., COMA 304). The data 
Q characters are, however, monitored for a link command 758 
fU or 762, which indicate a state change to SMS mode 766 or 

* CKT mode 770, respectively. Escape sequences 774 and 778 

* return the service routine to IDLE mode 754 from CKT mode 
^ 15 770 or SMS mode 766. 

^ FIG. 8 depicts the main loop 800 for the preprocessor 

driver. The main loop 800 begins by first initializing 
various operating parameters. For example, in act 8 04, a 
watchdog timer, a second timer, the serial ports, and the 
20 UART 416 are initialized. 

The watchdog timer is designed to reset the 
preprocessor 604 in the event that the software stalls or a 
processing error occurs. Preferably, the duration of the 
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watchdog timer is set to 4 . 5 seconds. A second timer is 
used to extend the 4.5 second timeout for routines that 
take longer than the first watchdog timer. The second 
timer generates a 2 millisecond interrupt. 
5 The serial ports (e.g., COMA 304 and COMR 308) are 

initialized to operated at 9600 baud, 8 data bits, 1 stop 
bit, and no parity, and the UART 416 is initially setup to 
run at 9600 baud. Memory buffer input queues have 1024 

J bytes each and store data characters received through COMR 

Q10 308 and COMA 304. 

01 Next, in act 808, the mode of the main loop is set to 

* IDLE (e.g., for both the first interface 616 and the second 
y interface 620) . After act 808, the interrupt service 
~ routine processing begins. 

/Si 5 In act 812, if an interrupt was received at the first 

interface 616, then an exception occurs and processing 
continues to the first interface interrupt service routine 
in act 816, which is described above with reference to FIG. 
7A and below with reference to FIG. 9. 
2 0 In act 82 0, if an interrupt was received at the second 

interface 620, then an exception occurs and processing 
continues to the second interface interrupt service routine 
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in act 824, which is described above with reference to FIG. 
7B and below with reference to FIG. 10. 

In act 82 8, a test is performed to determine whether 
the elapsed time since the last data character was received 
over the first interface 616 (e.g., through COMA 304) when 
the first interface interrupt service routine is in SMS 
mode 708. The test is referred to as the SMS timer expire 
event. If the SMS timer event has occurred, then in act 
832 the memory buffer is prepared for SMS transmission, the 
SMS message is transmitted and the SMS timer is reset. 
Processing continues to act 836. 

In act 83 6, if an interrupt was received at the third 
interface (e.g., debug interface 312 depicted in FIG. 3) 
then the debug interrupt service routine described below 
with reference to FIG. 11 is performed in act 840. 

In act 844, a test is performed to determine whether 
values of a modem status register or a line status register 
(taken from wireless radio 612 by UART 416) , have been 
updated. If either has been updated, then processing 
continues to act 848, described below with reference to 
FIG. 12. After, alternatively, acts 844 or 848, the 
process continues to act 852, at which point the loop is 
restarted at act 812. 
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FIG. 9 is a flowchart depicting the acts performed by 
the preprocessor driver when servicing an interrupt over 
the first interface 616. More specifically, the flowchart 
depicts the first interface interrupt service routine 900, 
5 which services interrupts from the user equipment (e.g., 
data collection 608) . 

In act 904, a test is performed to determine whether 
the present mode is CKT mode 712. If the mode is CKT mode 
O 712, then the data received by the first interface 616 is 
«pl0 passed through to the second interface 620 at act 908. 
O In act 912, a test is performed to determine whether 

\H an escape sequence was received. In particular, the test 
!L determines whether the character sequence w +++" was 
SI received through the first interface 616. If the escape 
Sl5 sequence was not received, then in act 916 the escape 

sequence counter is reset. However, if the escape sequence 
was received, then in act 920, the mode is set to IDLE mode 
704. The preprocessor driver then returns to the main 
loop, namely act 820. 
2 0 In act 924, a test is performed to determine whether 

the present mode is IDLE mode 704. If the present mode is 
IDLE mode 704, then the incoming data character from the 
first interface 616 is added to a memory buffer. Next, in 
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act 932, a test is performed to determine whether a process 
trigger (e.g., a carriage return, a CTRL-Z, or the memory 
buffer is full) has occurred. If a process trigger has 
occurred, then in act 93 6, the memory buffer is parsed, 
5 interpreted and the appropriate acts performed. A list of 
exemplary interpreted strings and their results is shown in 
Table 2 . 
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Table 2 

AT -EMU sets non-volatile memory to 

reflect the simulation mode 0 
indicates no simulation, 1 
5 indicates simulated circuit switch 

ATDnnnnnnn sends an establish link SMS 

message to phone number nnnnnnn 
(when AT-EMU set to 1) 

ATH sends a disconnect link SMS 

10 message to the phone number 

established using the ATD command 
(when AT-EMU set to 1) 

ATS7? returns the value 3 0 to the first 

interface 616 

His ATO returns to CKT mode if the carrier 

ji detect signal on the wireless 

x; radio 612 is still asserted 

"% AT+IPR=xxxx changes the baud rate on the 
jj; wireless radio 612 and on both 

Si2 0 ports on the preprocessor 604 to 

jE xxxx (2400, 9600) 

AT? displays this table to the debug 
^ port __ 



25 It is noted that the AT-EMU command sets the 

simulation mode for the unit. This is important because 
the unit is capable of providing both true circuit switched 
calls or simulated circuit switched calls. Accordingly, if 
the mode is set to no emulation, then the ATD and ATH 

3 0 commands will operate as setup/control functions for a 

truly circuit switched call. However, when the mode is set 
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to simulated circuit switched mode, the functions are 
unique as described above. 

After act 93 6 , the preprocessor driver returns to act 

820 . 

In act 94 0, a test is performed to determine whether 
the present mode is SMS mode 708. If the present mode is 
SMS mode 708, then in act 944 the SMS timer is reset. In 
act 948, another test is performed to determine whether 
there is sufficient room in the memory buffer to store 
additional data. If there is not sufficient room, then in 
act 952 an SMS message is sent thereby flushing a portion 
of the memory buffer. If, however, there is sufficient 
room in the memory buffer, then in act 956 any escape 
characters are handled, for example the occurrence of the 
string "+++" through COMA 3 04, or a disconnect link SMS 
message received through COMR 308. After handling the 
escape characters, the preprocessor driver returns to act 
820. 

FIG. 10 is a flowchart depicting the acts performed by 
the preprocessor driver when servicing an interrupt over 
the second interface 62 0 - i.e., the second interface 
interrupt service routine 1000. 
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In act 1004, a test is performed to determine whether 
the present mode is CKT mode 770. If the present mode is 
CKT mode 770, then any data characters received at the 
second interface 620 (e.g., COMR 308) are passed through 
5 the preprocessor 604 to the first interface 616 (e.g., to 
COMA 304) in act 1008. Next, in act 1012 a test is 
performed to determine whether an escape sequence has been 
received. According to one embodiment, the escape sequence 
C is the receipt of three consecutive plus signs, or the 
+:10 string " +++" . If the escape sequence is not found, then 
IS the escape counter is reset in act 1016. However, if the 

escape sequence is found, then the mode is set to IDLE mode 
O 754 in act 1020. After acts 1016 or 1020, the preprocessor 
inj driver continues to act 828. 

Cil5 In act 1024, a test is performed to determine whether 

the present mode is IDLE mode 754. If the present mode is 
IDLE mode 754, then data characters received at the second 
interface 62 0 are passed through to first interface 616 in 
act 1028. In act 1032, a test is performed to determine 
20 whether a link sequence is found in the data characters. 
According to one embodiment, the link sequence is the 
string "+CMTI : " , which indicates an incoming SMS message. 
If the link sequence is not detected, then the escape 
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counter is reset at act 1036. However, if a link sequence 
was detected, then the inbound SMS message is read in act 
1040 . 

Next, in act 1044, a second test is performed to 
5 determine whether another link sequence is found in the SMS 
message (e.g., in the SMS message type field) . For 
example, the next link sequence can be the "establish link" 
or "link established" messages described above with 
reference to Table 1. If no establish link or link 

10 established messages is found, then the remainder of the 
SMS message is output to the first interface 616 in act 
1048. However, if the establish link or link establish 
message is found, then the message is processed and the 
mode is set to SMS mode 766 in act 1052. The preprocessor 

15 driver then continues to act 828. 

In act 1056, a test is performed to determine whether 
the present mode is SMS mode 766. If the present mode is 
SMS mode 766, then a test is performed in act 1060 to 
determine whether a parse trigger has been received. 

2 0 According to one embodiment, parse triggers include a line 
feed or a carriage return, as well as a "buffer full" 
indicator. If no parse trigger has been received, then in 
act 1064 the data character is stored in the memory buffer 
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and processing continues to act 828. However, if a parse 
trigger has been received, then in act 1068, the SMS 
message is parsed. 

In act 1072 , a test is performed to determine whether 
the SMS message type is disconnect link. If the SMS 
message type is not disconnect link, then in act 1076, the 
SMS message type is sent to the first interface 616. 
However, if the SMS message is a disconnect link command, 
then the mode is set to IDLE mode 754 in act 1080. After 
step 1080, the preprocessor driver continues to act 828. 

FIG. 11 is a flowchart depicting the debug interrupt 
service routine 1100. Under normal circumstances a third 
interface, shown in FIGS. 3 and 4, receives the debug 
interrupt. The debug interrupt is commonly associated with 
connecting a terminal device or laptop computer into the 
third interface 332. The debug interrupt service routine 
1100 is used for setup and diagnostic purposes. 

In act 1104, a data character received over the third 
interface 332 is added to the memory buffer. In act 1108, 
the data character is tested to determine whether it is a 
carriage return. If the data character is not a carriage 
return, then the routine returns to act 844. If the data 
character is a carriage return, then in act 1112 the memory 
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buffer is parsed. In act 1116, a test is performed to 
determine whether a command from the memory buffer is in a 
command list (e.g., Table 2). If the command is not in the 
command list, then in act 1120 an error message is reported 
over the third interface 332. However, if the command is 
in the command list, then the command is executed in act 
1124. Thereafter, processing continues to act 844. 

FIG. 12 depicts a flowchart 12 00 for handling the 
modem status register ( W MSR") and line status register 
("LSR") values gathered from the first interface 616 and 
second interface 620. Essentially, a series of possible 
errors are analyzed and the appropriate action is taken, 
which includes, in some instances changing the preprocessor 
mode . 

In act 12 04, a test is performed to determine whether 
the carrier detect ("CD") is asserted on the second 
interface 620 (e.g., the wireless radio 612). If the 
carrier detect is asserted, then the carrier detect is 
asserted on the first interface 616 and the mode is set to 
the circuit mode in act 1208. 

In act 1212, a test is performed to determine whether 
the carrier detect is dropped on the second interface 620. 
If the carrier detect is dropped, then in act 1216 the 
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carrier detect is then dropped on the first interface 616 
and the mode is set to the idle mode. 

In act 122 0, a test is performed to determine whether 
the ring indicator ( U RI") is asserted on the second 
5 interface 620. If the ring indicator is asserted, then in 
act 1224 the ring indicator is asserted on the first 
interface 616. 

In act 1228, a test is performed to determine whether 
the ring indicator is dropped on the second interface 62 0. 
p10 If the ring indicator is dropped, then in act 1232 the ring 
S indicator is dropped on the first interface 616 as well. 
|| In act 123 6, a test is performed to determine whether 

« the clear- to-send ("CIS") is asserted on the second 

CI interface 620. If the clear-to-send is asserted, then in 
^15 act 1240 the wireless radio 612 is initialized. After acts 
™ 1236 or 1240, the preprocessor returns to act 852. 

The service routine embodied in flowchart 12 00 is 
useful in that the service routine can change the mode of 
the preprocessor 604 at either the first interface 616 or 
20 the second interface 620, in response to certain physical 
conditions, namely the assertion or dropping of one of the 
lines used to complete a virtual circuit. 
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APPLICATION LAYER EMBODIMENT 
According to another embodiment, special purpose 
simulation hardware (e.g., preprocessor 300 shown in FIG. 
3) is not integrated with an existing GSM modem. Rather, 
the functionality described above is implemented by way of 
software added to the application layer of a standard GSM 
protocol stack 1500 shown in FIG. 15A. The same software 
can also be added to the general packet radio service 
(GPRS) protocol stacks 1580 (GPRS Class C) and 1590 (GPRS 
Class A), shown in FIGS. 15B and 15C, respectively. Like 
reference numerals in FIGS. 15A-C refer to like elements. 

According to a presently preferred embodiment, the 
call setup and tear down functionality described above with 
reference to FIGS. 13A-C is performed by way of extensions 
to the application layer of the GSM protocol stack, for 
example, the GSM protocol stack already existing in a GSM 
modem. 

In such an embodiment, computer-readable program code 
is compiled and loaded into a non-volatile storage medium. 
The code is later executed by one or more processors 
configured to handle the incoming AT commands from the user 
equipment or the wireless input in the form of SMS packets. 
The application layer extensions build a functional 
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communications bridge for simulating circuit switched calls 
to the user equipment. An advantage of the application 
layer embodiment is that no special/single purpose hardware 
is required. Rather, functionality is added to an existing 
5 GSM modem by way of the software added to the GSM protocol 
stack. 

FIG. 15A depicts a GSM protocol stack 1500. The base 
components of GSM protocol stack 1500 are generally known 
in the art. For example, the base software components of 

10 GSM protocol stack 1500 are available from various venders 
such as debis Systemhaus in Berlin, Germany, CONDAT 
Datensystem Gmblt in Hannover, Germany, and other wireless 
communications vendors. According to one embodiment, the 
GSM protocol stack 1500 can be implemented in a variety of 

15 logic devices or in computer readable code executed by an 
embedded processor already part of the GSM modem. 

The present inventions are preferably embodied in 
software code that comprises the AT command interface 1504. 
The AT command interface is overlaid onto each of the 

20 various GSM protocol stacks 1500, 1580 and 1590. Commands, 
as described above with reference to Table 2, are thus 
bridged between the user equipment 13 04 and the GSM 
protocol stack and, hence, the GSM network 1320 (FIG. 
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13) . It is further noted that the AT command interface 
1504 can also include event detection and notification 
software that detects alarms from the user equipment and 
handles them appropriately -- for example by initializing a 
5 simulated circuit switched or circuit switched call. 

Referring to FIG. 15A, the user equipment 13 04 sends 
data over a GSM network 132 0 using the Hayes standard AT 
command interface 1504. The mobile network man machine 
interface (MN) 1512 receives the data and passes the data 

10 to the appropriate messaging service e.g., a short 
message service (SMS) 1516, a call control service (CC) 
152 0, or a supplementary service (SS) 1524. A registration 
element 1508 will provide the mobility management layer 
152 8 with necessary information about the data and the 

15 network. From each of layers 1508, 1516, 1520 and 1524 
data flow is then directed to and from the mobility 
management layer (MM) 1528. 

The mobility management layer 152 8 establishes, 
maintains, and releases connections between the user 

20 equipment 1304 and the GSM network 1320. From the mobility 
management layer 1528, data and control is passed to the 
radio resource management layer (RR) 1532. The radio 
resource management layer 1532 establishes physical 
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connections over the radio interface for call -related 
signaling and traffic channels between the user equipment 
1304 and base station 1488 (FIG . 14) . 

Connected to the radio resource management layer 1532 
5 is the physical layer (LI) 1540. The physical layer 1540 
processes call-related signaling and traffic channels 
directly from the radio resource layer 1532 , and also 
processes the data sent from the data link layer (L2) 1536. 
% FIG. 15B is substantially similar to FIG. 15A, 

plO however, the U G" notation in the protocol stack layers 
01 indicates that the designated layers now refer to a general 
«p packet radio service (GPRS) . GPRS uses a packet radio 
CJ principle and can be used for carrying packet data protocol 
Jj:[ between the user equipment 1304 and the GSM network 1320. 
"14l5 GPRS provides additional services beyond what is offered 
with the standard GSM network, for example, GPRS can 
provide increased over-the-air data transfer rates and 
packet lengths . 

An application program interface (API) 1544 is added 
2 0 to allow an application to control the subnetwork dependent 
convergence protocol (SNDCP) 1548, which is responsible for 
segmentation and re-assembly of the data packets, 
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encryption and decryption, and transmission control 
protocol (TCP) header and data compression. 

Layers interfacing the AT command interface 1504 
include the registration layer 1508 and man-machine 
5 interface layer 1512, which in turn interface the SM layer 
1552 and GSMS (GPRS short message service) 1556. The SM 
layer 1552 and GSMS layer 1556 interface the GPRS mobility 
management (GMM) layer 1560, and both the GMM and SNDCP 
layer 1548 interface the link layer control (LLC) 1564, 
10 which handles the link layer information of the packet 
data . 

Link layer control 1564 interfaces the GPRS resource 
management layer (GRR) 1568. GPRS resource management 
layer 1568 in turn interfaces medium access control / radio 

15 link control (RLC/MAC) layer 1572, which handles the 

physical link processing, as well as physical layer 1540. 

FIG. 15C shows the GPRS Class A protocol stack 1590. 
The protocol stack 1590 is a merge of the GSM protocol 
stack 1500 (FIG. 15A) and the GPRS Class C protocol stack 

20 1580 (FIG. 15B) , which is denoted by the dual reference 
numbers annotating the various layers of the protocol 
stack. The GPRS Class A protocol stack can operate 
standard GPRS and other GSM services simultaneously. 
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DATA COLLECTION SYSTEM 

FIG. 14 depicts an alternative system 1400 employing 
the present invention. User equipment 1404 comprises an 
application program, for example a telemetry, automatic 
meter reading, meter concentration point, utility meter 
control system, substation monitoring, home network control 
system, or other application. In particular, the present 
inventions can be used in conjunction with an event 
detection and notification application, such a fire alarm, 
gas alarm, burglar alarm, vending machine alarm, or another 
condition indicating a change of state of the user 
equipment 1404, or some other device connected thereto. 

An RS-232 interface 1448 with hardware flow control 
connects user equipment 1404 to data terminal module 100, 
or alternatively data terminal unit 200. Data terminal 
module 100 and data terminal unit 200 preferably comprise a 
debug port through which terminal equipment or a laptop 
computer 1412 can interface and perform installation or 
testing services with software tools 1484. Optionally, the 
debug and configuration service can be accessed through the 
first interface 616. 
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The data terminal module 10 0 and data terminal unit 
200 communicate via a wireless radio to one or more antenna 
relays 1408. Preferably the wireless radio is a GMS type 
modem. The wireless radio is configured to transmit and 
5 receive information between said data terminal module 100, 
or data terminal unit 200 and GSM network 1488. 

At least one of the one or more antennas relays 1408 
is connected to a base transceiver station ("BTS") 1416. 
The base transceiver station 1416 processes the inbound 
*%10 wireless data (e.g., forms data packets for the inbound 
p! wireless data) and routes it over a Tl line 1456 (or other 
?j leased line) to base station controller ("BSC") 1420. The 
a base station controller 1420 authenticates service for the 

-il data terminal unit/module and directs the processed inbound 
□ l5 wireless data over Tl line 1456 to a mobile switching 
iyy center ( U MSC") 1424. The mobile switching center 1424 

directs the processed inbound wireless data over a lease 
line 1456 to an appropriate networking station, for example 
an interworking function ("IWF") 1432, such as a PSTN 
2 0 bridge/router in the case of a circuit switched data path 
(identified by label "1"), or a short message service 
center ( U SMSC") 1428, in the case of a short message 
service data path (identified by label "2") . 
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If the data path is a circuit switched data path, then 
from the interworking function 1432 the processed wireless 
data is passed over a public switched telephony network 
("PSTN" ) 1436 to circuit switched data interface 1436. If, 
5 however, the data path is a short message service data 

path, then the short message service center 142 8 can route 
the processed wireless data over a PSTN connection 1460 to 
interface 1436, or over an packet switched network 1456 
connected to an internet 1440. In the case of routing over 
%10 the internet 1440, the short message service center 1428 
S handles all Internet Protocol packetization according to 
fy known Internet Protocol standards, such as publicly 
a available Internet RFC 791, which is incorporated herein by 

: fl reference in its entirety. 

□i5 a user application server 1444 retrieves the inbound 

* wireless data from the PSTN interface 1436 via a modem 
connection 1468. Alternatively, the user application 
server 1444 retrieves the inbound wireless data via an 
internet access/service provider 1476 connected to internet 
20 1440. 

Optional terminal management software 14 80 can be used 
by the user application server 1444 to provide outgoing 
data, command, or setup services from the user application 
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server 1444 to the user equipment 1404 (though the data 
terminal module 100 or data terminal unit 200) in a reverse 
path as is described above. 

The methods, techniques and apparatuses described 
herein are advantageous over prior data collection, 
monitoring and control equipment in that an application 
specific communication infrastructure is not needed. 
Rather, the inventions can be utilized with existing 
wireless communication networks, and especially with GSM 
networks supporting short message services. Moreover, the 
present inventions provide a system that minimizes service 
personnel physical intervention in the acquisition of 
measured data from user equipment. In the systems 
described herein, measured data can be collected remotely 
via user application server direct polling or by present or 
programmed intervals within the preprocessor unit. This 
represents a significant improvement over historical 
extrapolation and stochastic methods of measured data 
collection. 

The inventions are described herein by way of example 
and not by way of limitation. The written description and 
drawings are illustrative of preferred embodiments but not 
the only embodiments of the present invention. 
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Accordingly, further embodiments of the invention will be 
apparent upon inspection of this specification by one of 
skill in the art. For example, the use of security or 
special identifiers to designate particular user equipment 
5 1404, data terminal modules 100 or units 200, and terminal 
equipment 1412 can be employed to protect the system 1400 
from unauthorized access. Additionally, other 
communications interfaces other than RS-232 can be employed 
in the present invention, for example, RS-485 and CEBus . 
%10 Furthermore, the methods and techniques described above can 

IT™*! 

n be embodied in a distributed software environment wherein 

hi certain steps are performed by particular devices, or 

s processing moved from the preprocessor to the user 

^ equipment or the wireless radio, or a combination of both. 
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CLAIMS 

What is claimed is: 



1 1. A data collection system comprising: 

2 a GSM network; 

3 a user application server coupled to said GSM network; 

4 a data terminal apparatus including a communications 

5 bridge, a first interface, and a wireless radio, 

6 said wireless radio configured to connect to said 

7 GSM network; and 

8 a user equipment coupled to said data terminal 

9 apparatus through said first interface, said user 

10 equipment configured to collect and send data 

11 through said first interface as if placing a 

12 circuit switched call link; wherein 

13 said communications bridge is configured to simulate 

14 said circuit switched call link to said user 

15 equipment and to communicate said data over said 

16 GSM network through said wireless radio using a 

17 non-circuit switched call link, and GSM network 

18 is configured to route said data to said user 

19 application server for processing. 
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1 2. The data collection system of claim 1, wherein said 

2 non-circuit switched call link is made via one or more 

3 short message service messages. 

1 3. The data collection system of claim 1, wherein said 

2 non-circuit switched call link is made via one or more 

3 general packet radio service messages. 

1 4. The data collection system of claim 1, wherein said 

2 communications bridge comprises application layer object 

3 code built over a GSM protocol stack associated with said 

4 wireless radio, said application layer object code 

5 configured to handle incoming AT commands from said user 

6 equipment and handle said simulation of said circuit 

7 switched call link to said user equipment. 
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1 5. The data collection system of claim 1, said 

2 communications bridge further comprising a preprocessor 

3 unit, said preprocessor unit comprising: 

4 a microcontroller; 

5 a non-volatile memory coupled to said microcontroller; 

6 a volatile memory coupled to said microcontroller; 

7 an input output controller coupled to said 

a-- 8 microcontroller, said input output controller 

jp 9 including said first interface and a second 

HjLO interface, said wireless radio coupled to said 

fill microcontroller through said second interface. 

iL.J 

^1 6. The data collection system of claim 1, wherein said 

2 communications bridge is configured to packetize data 

^ 3 received from said first interface into short message 

4 service format . 
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1 7. The data collection system of claim 1, wherein said 

2 communications bridge is configured to packetize data 

3 received from said first interface into general packet 

4 radio service format . 

1 8. A method for collecting data over a GSM network 

2 comprising: 

3 receiving data at a data terminal apparatus from a 
O 4 user equipment; 

J 5 simulating a circuit switched call link response to 

;S 6 said user equipment; 

7 packetizing said received data into packets for 

r] 8 transmission over a non-circuit switch call link 

flj 9 to said GSM network; 

tflO transmitting said packetized data over said GSM 

11 network; and 

12 routing said packetized data through said GSM network 

13 to a user application server. 

1 9. The method of claim 8, wherein said packets are short 

2 message service packets. 
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1 11. A method for receiving information over a GSM network 

2 comprising: 

3 transmitting a packet of information over said GSM 

4 network, said packet originated by a user 

5 equipment ; 

6 receiving said packet of information at a data 

7 terminal apparatus; 

^ 8 establishing a simulated circuit switched call link 

p 9 between said data terminal apparatus and a user 

plO equipment; 

pjll transforming said packet of information into serial 

s 12 data information; and 

#]_3 sending said serial data information from said data 

Cfi4 terminal apparatus to said user equipment over 

^15 said simulated circuit switched call link. 

1 12. The method of claim 11, wherein said packet of 

2 information is in short message service format. 

1 13. The method of claim 11 , wherein said packet of 

2 information is in general packet radio service format. 
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1 14 . A computer-readable medium having stored therein 

2 sequences of instructions for collecting data over a GSM 

3 network, said one or more sequences of instructions causing 

4 one or more processing to perform the acts of: 

5 receiving data at a data terminal apparatus from a 

6 user equipment; 

7 simulating a circuit switched call link response to 

8 said user equipment; 

_ 9 packetizing said received data into packets for 

JiO transmission over a non-circuit switch call link 

fil to said GSM network; 

np-2 transmitting said packetized data over said GSM 

~ 13 network; and 

Cl4 routing said packetized data through said GSM network 

ML5 to a user application server. 

1 15. The computer readable medium of claim 14, wherein said 

2 packets are short message service packets. 

1 16. The computer readable medium of claim 14, wherein said 

2 packets are general packet radio service packets. 
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1 17. A computer readable medium having stored therein 

2 sequences of instructions for receiving information over a 

3 GSM network, said one or more sequences of instructions 

4 causing one or more processors to perform the steps of: 

5 transmitting a packet of information over said GSM 

6 network, said packet originated by a user 

7 equipment ; 

8 receiving said packet of information at a data 
O 9 terminal apparatus ; 

+10 establishing a simulated circuit switched call link 

Mil between said data terminal apparatus and a user 

^5.2 equipment; 

^„13 transforming said packet of information into serial 

data information; and 

Cp-5 sending said serial data information from said data 

16 terminal apparatus to said user equipment over 

17 said simulated circuit switched call link. 

1 18. The computer readable medium of claim 17, wherein said 

2 packet of information is in short message service format. 
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1 19. The computer readable medium of claim 17, wherein said 

2 packet of information is in general packet radio service 

3 format . 
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ABSTRACT: 

A data collection system for transmitting data from 
user equipment to a user application server over a GSM 
network is provided. According to an aspect of the 
5 invention, a data terminal apparatus is configured to 
simulate a circuit switched call link to the user 
equipment, while providing a communications call link to 
the GSM network over a non-circuit switched call link. 
According to embodiments described herein, the non-circuit 
SlO switched call link is achieved via packetizing serial data 
m from the user equipment into short message service 
JG messages, or alternatively via general packet radio service 
Q messages. As a result of the methods and apparatuses of 
[Jf the present inventions, legacy serial communications 
^JL5 equipment can be integrated into a data collection network 
and remotely monitored without the costs associated with 
deploying service personnel or more costly circuit switched 
type equipment and services. 
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